Rewrite 548 skill descriptions to the activation rubric

Each rewritten description now states both what the skill does (concrete
capability, named tools/artifacts) and an explicit when-to-use trigger,
improving agent discovery/activation. Grounded in each skill's own body;
changes confined to the `description` field only (bodies and all other
frontmatter untouched). Produced by a gated audit->rewrite->recheck loop
(548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded).

Schema: 817/817 pass. Framework-ID gate: 0 defects.
This commit is contained in:
Mahipal
2026-08-02 09:32:13 -07:00
parent 04a207702e
commit 2fb6a9faff
548 changed files with 2189 additions and 1915 deletions
@@ -1,8 +1,10 @@
---
name: analyzing-windows-shellbag-artifacts
description: Analyze Windows Shellbag registry artifacts to reconstruct folder browsing
activity, detect access to removable media and network shares, and establish user
interaction with directories even after deletion using SBECmd and ShellBags Explorer.
description: Analyze Windows Shellbag (BagMRU) registry artifacts with SBECmd and
Shellbags Explorer to reconstruct folder browsing activity and prove user interaction
with directories, including removable media and network shares, even after the
folders are deleted. Use when reconstructing a user's folder access history or
proving access to a since-removed directory in DFIR work.
domain: cybersecurity
subdomain: digital-forensics
tags: